favcolor.net

[Axel.N...@telekom.de]

1) The source code of “https://favcolor.net/account-login” contains this line:

<script src="//code.jquery.com/jquery-latest.js"></script>

Shouldn’t this be https always?

<script src="https://code.jquery.com/jquery-latest.js"></script>

Even if account-login is served only over SSL.

 

2) In IE there is a warning about ssl certificate errors. Don’t know how I could convince IE to give more details about the errors.

 

3) After the logout my browser is redirected to

https://www.accountchooser.com/redirect.html#favcolor.net

I think that here should be an option to manage accounts (delete one) on this page too. Or a link to https://www.accountchooser.com/ where I can manage my accounts.

 

Axel

 

From: oidf-account...@googlegroups.com [mailto:oidf-account...@googlegroups.com] On Behalf Of Nat Sakimura
Sent: Wednesday, January 09, 2013 3:57 AM
To: oidf-account...@googlegroups.com
Subject: Re: OIDF Account Chooser workgroup proposed agenda for 1/9/2013

 

Hi. 

 

It would be great if we can plan out for actually making the AC documentation into the OIDF specs format as well. 

 

Tim, are you going to be in RSA? If so, we could take couple of hours to create a first draft. 

 

Nat

 

On Wed, Jan 9, 2013 at 7:55 AM, Eric Sachs <esa...@google.com> wrote:

Suggested agenda for tomorrow.  Feel free to suggest changes.

 

AC updates from Marketing committee

[Tim] Tim circulated his favcolor.net AccountChooser+OpenIDConnect demo

[Tim] Tim did a blog post on Account Chooser on Oct 4th, and it was referenced from OIDF blog

[Adam] Google related v2 of the Google Identity Toolkit that using Account Chooser by default

[Eric] Update on Cloudfour proposal for 5 areas of improvements to accountchooser.net - The CloudFour team has started working on the changes Jason described in his 5 emails in December.  As an example, I've circulated a visual diagram they are working on to help developers understand how to do the integration.  Their goal is to to be done by the end of January with everything but the illustrations, and then have those done by end of February.  Google has provided $10k more in OIDF directed funding to help cover the costs of this work.  The CloudFour team is starting a search for an illustrator to update the cartoons we are currently using on the site.  If anyone has suggestions of vendors, please let us know.

[BrianB] Latest Symantec proposal on incorporating their brand into accountchooser.com/net

 

Operational changes

[Brian/Eric]

 - domain status - Symantec now has control/responsibility

 - SSL cert - new one being setup

 - process/procedure - needs to be flushed out

 

Functional changes

[Greg/Adam] They were going to follow up about the "add account"

[Eric] The last major area of suggested changes to Account Chooser has been browser optimizations.  This doc linked from ac.openid.net summarizes past discussions.  We can spend a few minutes discussions people's opinions/interest in any of these specifics items

 

--

Eric Sachs | Group Product Manager for Identity | esa...@google.com 

--
 
 
 

 

--
Nat Sakimura (=nat)

Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--
 
 
 

[Tim Bray]

On Wed, Jan 9, 2013 at 4:11 AM, <Axel.N...@telekom.de> wrote:

1) The source code of “https://favcolor.net/account-login” contains this line:

<script src="//code.jquery.com/jquery-latest.js"></script>

Shouldn’t this be https always?'

Yes, I suppose so.

 

2) In IE there is a warning about ssl certificate errors. Don’t know how I could convince IE to give more details about the errors.

Is this a reasonably-up-to-date IE?  It's not possible to support back revs of IE without spending extra so favcolor.net gets its own IP address, which seems a little superfluous. 

 

3) After the logout my browser is redirected to

https://www.accountchooser.com/redirect.html#favcolor.net

I think that here should be an option to manage accounts (delete one) on this page too. Or a link to https://www.accountchooser.com/ where I can manage my accounts.

Hm, it redirects back to the landing page, which redirects to accountchooser.  I suppose it would be better to have a little thank-you-and-goodbye page, instead.

 -T

 

--
 
 
 

[Axel.N...@telekom.de]

IE version is 8.

 

The remark about account management (3) was more a remark about accountchooser not about favcolor.net. Although

https://www.accountchooser.com/redirect.html#favcolor.net

is a page for favcolor.net, I think, that this page could/should have a link in it to allow account management.

That would be like a file chooser in Windows where the user can create a file while he is currently supposed to choose one.

Maybe it is ok like it is today. When I tried favcolor.net today I found an old account on accountchooser.com. After the logout from favcolor.net I wanted to delete that account from accountchooser.com. There was way to do that on the “redirect.html” page. I had to delete the path in the url bar and could then delete that account from accountchooser.com’s top page.

 

Axel

--
 
 
 

[Eric Sachs]

+Adam Dawes

>> The remark about account management (3) was more a remark about accountchooser not about favcolor.net.

Agreed.  The current plan for that is for users to be able to click "About Account Chooser" at the bottom, and the help page would tell them they could just visit accountchooser.com directly to edit their list of accounts.  Adam Dawes has a low priority task to work on the content of that page.  We also were looking at adding a way for a user to disable accountchooser.com directly on their browser.  I think we might have even written that code in the past, but just lost the link.

--
 
 
 

[Adam Dawes]

Yes, we are working with Janrain to offer a tool that allows users to easily add accounts to AC if they are navigating directly to it. If you're learning about AC and want to try it, there's no way to easily find an RP to go through the flow.

thanks,

AD